The *pxe* role configures the TFTP and NBD stages of PXE network booting. The TFTP server provides the files used for the boot stage, which may either be a kernel and initramfs, or another bootloader like SYSLINUX/PXELINUX or GRUB. The NBD server provides the root filesystem, typically mounted by code in early userspace/initramfs. The *pxe* role also creates a user group called *pxeadmins*. Users in this group can publish content via TFTP; they have write-access to the `/var/lib/tftpboot` directory.
37 lines
668 B
YAML
37 lines
668 B
YAML
- name: ensure pxeadmins group exists
|
|
group:
|
|
name: pxeadmins
|
|
state: present
|
|
tags:
|
|
- group
|
|
|
|
- name: ensure pxeadmins can write to tftpboot directory
|
|
acl:
|
|
path: /var/lib/tftpboot
|
|
entity: pxeadmins
|
|
etype: group
|
|
permissions: rwX
|
|
recursive: True
|
|
default: '{{ item == "default" }}'
|
|
state: present
|
|
loop:
|
|
- default
|
|
- current
|
|
tags:
|
|
- permissions
|
|
|
|
- name: ensure pxeadmins can write to nbd directory
|
|
acl:
|
|
path: /var/lib/nbd
|
|
entity: pxeadmins
|
|
etype: group
|
|
permissions: rwX
|
|
recursive: True
|
|
default: '{{ item == "default" }}'
|
|
state: present
|
|
loop:
|
|
- default
|
|
- current
|
|
tags:
|
|
- permissions
|